Vulnerabilities > CVE-2017-10889 - XXE vulnerability in Tablepress

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

NVD

Published: 2017-11-17

Updated: 2017-12-04

Summary

TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors.

Part	Description	Count
Application	Tablepress Tablepress Tablepress 0.9 Tablepress Tablepress 1.0 Tablepress Tablepress 1.1 Tablepress Tablepress 1.1.1 Tablepress Tablepress 1.2 Tablepress Tablepress 1.3 Tablepress Tablepress 1.4 Tablepress Tablepress 1.5 Tablepress Tablepress 1.5.1 Tablepress Tablepress 1.6 Tablepress Tablepress 1.6.1 Tablepress Tablepress 1.7 Tablepress Tablepress 1.8	13